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Abstract 

We show how the study of the geometry of the nine flex tangents to a cubic produces pseudo- 
parameterizations, including the ones given by Icart, Kammerer, Lercier, Renault and Farashahi, 
and infinitely many new ones. 

To Jean-Jacques Quisquater, on the occasion of his emeritat 

1 Introduction 

Much attention has been focused recently on the problem of computing points on a given elliptic 
curve over a finite field in deterministic polynomial time. This problem arises in a very natural man- 
ner in many cryptographic protocols when one wants to encode messages into the group of points 
of an elliptic curve. A good example of the algorithmic and cryptologic motivations in finding these 
parameterizations can be found in the identity-based encryption from fl4|. The difficulty is to deter- 
ministically find a field element x such that some polynomial in x is a square, see [14], Section 6.1.8. 
For example, when the curve is given by a reduced Weierstrass equation y 2 = x 3 + ax + b, we 
deterministically search x such that x 3 + ax + b is a square in the field. 

In 2006, Shallue and Woestjine GUI proposed a first practical deterministic algorithm. In 2009, 
Icart lTT2l proposed another deterministic encoding for elliptic curves over a field k with q elements, 
when q is congruent to 2 modulo 3. Icart's algorithm has quasi-quadratic complexity in log q. Kam- 
merer, Lercier and Renault lfT3l proposed a different encoding under the additional condition that 
the elliptic curve has a rational point of order 3, and even for a special class of hyperelliptic curves. 
Farashahi [8] found yet another parameterization for such elliptic curves too. A crucial point in 
lfl2l [T3l HI is that the map x i-)- x 3 is bijective for a finite field k having cardinality congruent to 

2 modulo 3. Its inverse map is x \-t x e where e mod q — 1 is the inverse of 3 mod q — 1 and 
< e < q — 1. Exponentiation by e can be computed in deterministic time (log q) 2+ °W using the 
fast exponentiation algorithm. So in order to deterministically compute points on an elliptic curve C 
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over such a finite field, one can afford the usual field operations together with cubic roots. In other 
words, one looks for a parameterization of the elliptic curve by cubic radicals. Such a parameteriza- 
tion will be called a pseudo-parameterization in this article. Finding such a pseudo-parameterization 
is a special case of the problem of finding parameterizations of curves by radicals |fl9ll . 

We show how such pseudo-parameterizations can be obtained from the study of the dual curve of 
the elliptic curve C. In a nutshell, we produce points on C as intersection points between C and well 
chosen lines. If D is a line in the projective plane, then the intersection D.C consists of three points, 
counting multiplicities. These three points can be computed by solving a cubic equation. We recall 
in Section [2] how to derive the Tartaglia-Cardan formulae for this purpose. Recall these formulae 
run in two steps. One first has to compute a square root of the discriminant. The three solutions are 
then calculated using the field operations and cubic roots. Since cubic roots are not a problem in our 
context, the only remaining difficulty is computing the square root of the discriminant. So we choose 
the line D in such a way that the discriminant of the intersection D.C is a square, and we assume that 
we have an algebraic formula for its square root. More precisely, we consider a line D t depending 
on a rational formal parameter t. This means that the coefficients in the projective equation of D t are 
polynomials in the indeterminate t. The discriminant A(t) of the intersection L t .C is then a rational 
fraction in t. We ask that this discriminant be a square in k(t). We compute once for all a formal 
square root 5(t) of A(i). For every value of t we can then produce a point on C using only the field 
operations and cubic roots. 

We recall in Section [3] that the projective lines in P are parametrized by the dual plane P. The line 
in P with projective equation UX + VY + WZ = is represented by the point [U : V : W] G P. A 
rational family of lines t\-^D t thus gives rise to a rational curve L inside P. Indeed, if the projective 
equation of D t isU{t)X + V(t)Y + W(t)Z = Qihenthemnpt ^ \U(t) : V(t) : W{t)\ parametrizes 
a rational curve inside P. The discriminant A(t) vanishes whenever D t .C has a multiple root. This 
happens if and only if D t is tangent to C. Not every projective line is tangent to C. The subset of 
P corresponding to lines that are tangent to C is a curve denoted C and called the dual curve of C. 
So A(t) describes the intersection between the rational curve L and the dual curve C. And A(t) is 
a square if and only if every point in the intersection between L and C has even multipicity. So we 
will be interested in rational curves L in P that have even intersection with the dual curve to the cubic 
curve C. The connection between such curves and pseudo-parameterizations is detailed in Section [4] 

Because the dual curve C plays such an important role we will study it in Section [3] This curve 
has genus 1 and 9 singularities, all cusps. Indeed the nine cusps of C correspond to the nine flex 
tangents to C, while the smooth points on C parametrize the tangent lines to C that are not flexes. 
These nine points in the dual plane form an interresting configuration that we study in Section [5] We 
are particularly interested in rational curves L passing through several among these nine points. We 
will find that many such curves L have even intersection with C. We will show in Section[6]that these 
curves give rise to all the known pseudo-parameterizations of C found by Icart, Farashahi, Kammerer, 
Lercier, Renault, and to several new ones. It is then natural to ask how many rational curves on P have 
even intersection with C. We shall see in Section [7] that there are infinitely many such rational curves, 
giving rise to infinitely many inequivalent pseudo-parameterizations. These curves lift to rational 
curves on the degree two covering £ of the dual plane ramified along C. This will lead us to the 
classical and beautiful topic of rational curves on K3 surfaces. 

Throughout the paper, we denote by A; a field with characteristic different from 2 and 3, by k D k 
an algebraic closure of k, and by £3 € k a primitive third root of unity. We set y/—3 = 2^3 + 1. 

The Maple ifTTj code for the calculations in this article can be found on the authors' web pages. 
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2 Solving cubic equations 



In this section we recall the Tartaglia-Cardan formulae for solving cubic equations by radicals. A 
modern treatment can be found in [6]. We believe it is worth stating these equations in an unambiguous 
form, that is well adapted to our context, and does not make excessive use of radicals and roots of unity. 
In other words we need regular and generic formulae. Let h(x) = x 3 — s\x 2 + S2X — S3 be a degree 
3 separable polynomial in k[x}. Call ro, T\ and r 2 the three roots of h(x) in k. Set 

6 = \/ z 3(n - r )(r 2 - ri)(r - r 2 ) 

and A = 5 2 . Note that A is the usual discriminant multiplied by —3. We call it the twisted discrimi- 
nant. Since it is a symmetric function of the roots, it can be expressed as a polynomial in s%, s 2 and 
S3. Indeed 

A = 8IS3 - 54s 3 sis 2 - 3s\sl + 12s?s 3 + 12s|. 

In particular A lies in k. Let I = £(£3, 5) C k be the field obtained by adjoining S and a primitive 
third root of unity to k. We set m = l(r±, r 2 , ro). 

If the extension I C mis non-trivial then it is a cyclic cubic extension. Since / contains a primitive 
third root of unity, this cubic extension is a Kummer extension: it is generated by the cubic root of 
some element in I. Let a be the generator of the Galois group that sends rj to ri+i for i S {0, 1, 2}, 
with the convention that indices make sense modulo 3. We set 

P = r + CjTV + Cs 2 r2 

and we check that a{p) = (3/?. We set R = p 3 and we check that R is invariant by a. So R is an 
invariant for the alternate group acting on {r%, r 2 , and it can be expressed as a polynomial in s%, 
s 2 , S3 and 6. Indeed we find 

3 3 27 9 3 ^ 

R = p = sf + —s 3 - -sis 2 - -0. 
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Similarly we set 
and we check that 



p' =r + C3H + d r 2 



R' = p' 3 = s? + — s 3 - -sis 2 + -5. 



We note that pp' = + r\ + r\ — r§r\ — rir 2 — r 2 ro is invariant by the full symmetric group 
and is indeed equal to s\ — 3s 2 . So both p and p' are computed by extracting a single cubic root. 
Finally, the three roots ro, ri, r 2 can be expressed in terms of p by solving the linear system: 

ro + r\ + r 2 = s\ 
ro + C3~ lr i + Csr 2 = p 



ro + C3H + C 3 1? "2 



„/ 



In particular the formula for the root 
does not involve £3- 



3 r 2 = p 



ro = (1) 
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3 The dual curve of a cubic 



In this section we review the properties of the dual of a cubic curve. A thorough treatment of the 
duality for plane curves can be found in ||9l , ifTTTl and iPTOl . Let E = k 3 and let E be the dual of 
E. Let U = (1, 0, 0), V = (0, 1, 0) and W = (0, 0, 1). So (17, V, W) is the canonical basis of E. 
Let (X, Y, Z) be the dual basis of (17, V, W). Let P = Proj(£) = Proj k[X, Y, Z] be the projective 
plane over k. Let P = Proj(£') = Proj k[U, V, W] be the dual projective plane. The main idea of 
projective dualy is that points in P parametrize lines in P, and conversely. The point [U : V : W] in 
P corresponds to the line with equation UX + VY + WZ = in P. And the point [X : Y : Z\ in P 
parametrizes the line XU + YV + ZW = in P. 

Now let C C P be an absolutly integral curve with equation F(X, Y, Z) = 0. Let F x = fy, 
= f^> Fz = be the three partial derivatives of F. The tangent to C at a smooth point 
P = [Xp : Yp, Zp] has equation 

F X (X P , Y P , Z P )U + F Y (X P , Y P , Z P )V + F Z (X P , Y P , Z P )W = 0. 

The corresponding point in P is [F X (X P , Y P , Z P ) : F Y (Xp,Yp,Z P ) : F Z (X P ,Y P , Z P )}. The 
Zariski closure of the set of all such points is the dual C of C. So C is the closure of the image of the 
so called Gauss morphism 

U j c : (jsmo ^ jp 



[X:Y:Z\ I [F x (X, Y, Z) , F Y (X, Y,Z),F Z (X, Y,Z)], 

where C smo is the locus of smooth points on C. 

We assume that the characteristic of k is odd, and that not every point on the curve C is a flex or 
a singular point (in particular C is not a line). Then C is an absolutely integral curve. And the dual of 
C is C. This is the biduality theorem [11. Theorem 5.91]. Duality is very useful because it translates 
properties of C into properties of C and conversely. In particular the Gauss map ujc is a birational 
map from C to C. It maps the flexes of C onto the cusps of C. 

The first non-trivial example of duality concerns conies (smooth plane projective curves of degree 
2). The dual of conic is a conic. 

We now assume that C is a smooth cubic. Then C has degree 6 and to each of the nine flexes 
of C there corresponds an ordinary cusp on C. Since C has geometric genus 1 and arithmetic genus 
10 = (6 — 1)(6 — 2)/2 we deduce that there is no other singularity on it than these nine cusps. For 
example, if C has equation F(X, Y, Z) = where 

F(X, Y, Z) =X 3 + Y 3 + Z 3 - SaXYZ, (2) 

then the dual curve has equation G(U,V, W) = where 

G(U, V, W) = U 6 + V 6 + W e - 6a 2 (U 4 VW + UV 4 W + UVW A ) 

+(4a 3 - 2)(U 3 V 3 + U 3 W 3 + V 3 W 3 ) + (12a - 3a 4 )U W . ' ^ 

The equation of the dual is found by eliminating X, Y , and Z in the system 

U = F X (X,Y,Z) 
V = F Y (X,Y,Z) 
W = F Z (X,Y,Z) 
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The real loci of the two curves C and C are represented in Figure Q] and Figure [2] respectively in the 
case a = 0. 




Figure 1 : The cubic with equation X 3 + Y 3 + Z 3 = 




Figure 2: The dual curve with equation U 6 + V 6 + W 6 - 2U 3 V 3 - 2V 3 W 3 - 2U 3 W 3 = 

The equation of the dual curve arises naturally when one studies the intersection of the cubic C 
with a projective line D. Indeed such a line D C P meets C in exactly three points unless it is a 
tangent line to C (in which case we have one simple point and one double point) or even a flex (in 
which case we have one triple point). Assume that D is the line with equation 

UX + VY + WZ = 0. (4) 

The intersection D.C is described by the homogeneous system consisting of Equation © and the 
equation of the cubic C. We can use Equation ((U) to eliminate one of the three variables X, Y, Z 
in the equation of C. We obtain a binary cubic homogeneous form in the two remaining variables, 
whose twisted discriminant A (£7, V, W) is the equation of the dual curve C (up to a square). This is 
because this discriminant cancels exactly when the intersection D.C has multiplicities. 

4 Pseudo-parameterizations 

Let C be an absolutely integral plane projective curve over a field k. A parameterization of C is a 
non-constant map from P 1 onto C. In more concrete terms we have a point P t = [X(t) : Y(t) : Z(t)] 
on C, depending on one formal parameter t, the three projective coordinates beeing polynomials in 
k[t\. It is well known fT9l theorem 4.11.] that a necessary condition for such a parameterization to 
exist is that C has geometric genus zero. In particular this never happens for an elliptic curve. One 
may relax the condition that the coordinates X(t), Y(t) and Z(t) should lye in k[x] and allow for 
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more general algebraic functions. A typical restriction would be to ask that X(t), Y(t) and Z(t) 
should belong to a radicial extension of k(t). In other words they should be rational fractions in t and 
y/R{t) for some positive integer e and some R(t) in k(i). As explained in the introduction we will 
be interested in the case when C is a smooth cubic, A; is a field with characteristic different from 2 
and 3, and e = 3. We want to parametrize plane cubics by cubic radicals. Such a parameterization 
will be called a pseudo-parameterization to avoid any confusion with rational parameterizations that 
do not exist for genus one curves. We will assume that C(k) is non-empty. This is not a restriction if 
k is a finite field. We will even assume that C has a A;-rational flex O. This is not a restriction either, 
because every cubic with a rational point is fc-isomorphic to a plane cubic with a rational flex. 

We sketched in the introduction how we claim to find pseudo-parameterizations. We consider a 

line 

D t : U{t)X + V(t)Y + W(t)Z = 

in P, depending on one rational parameter t. Since every line in P corresponds to a point in P we can 
associate to the family D t a rational curve L C P which is the image of the map 

t^[U(t):V(t):W(t)}. (5) 

We saw in Section [3] that the intersection D t .C is described by a cubic form whose twisted 
discriminant A(t) is, up to a square, equal to G(U(t),V(t),W(t)) where G(U,V,W) = is the 
projective equation of the dual C. So we look for polynomials U(t), V(t) and W(t) such that 
G(U(t),V(t),W(t)) is a square in k(t). A geometric interpretation of the latter condition is that 
the rational curve L meets the dual C with all even multiplicities. So we look for a rational curve 
LcP that intersects the dual curve C with even multiplicities. Such a rational curve may be given 
by its projective equation, or as the image of a parameterization as in ((5]). 

One may wonder if every pseudo-parameterization occurs in that way. We briefly explain why this 
is essentially the case. A pseudo-parameterization t i-> Pt is a surjective map from a cyclic covering 
of P 1 onto C. So we have two conjugated points P[ and P". Since C has a rational flex O, we have 
a chord and tangent group law, denoted ©, on it. We consider the sum Q t = P t © P[ © P" . This 
is a point on C defined over k(t), or equivalently a map t h- > Q t . We saw that such a map must be 
constant because C has genus 1. So P t © P[ © P" is a constant point A G C(k). If A is the origin 
O then for every value of the parameter t, the three points P t , P[ and P" are colinear. They lye on 
a line D t with equation U{t)X + V(t)Y + W{t)Z = where U(t), V(t) and W{t) are in k[t}. So 
the pseudo-parameterization t i-)- Pt is of the type studied above. If A is not O, we may look for 
a point B G C(k) such that B © B © B = A. Such a point always exists if k is a finite field and 
#C(k) is not divisible by 3. Then we set R t = P t © B and check that R t ®R' t ® R" = O. So the 
pseudo-parameterization t \-¥ Pt is of the type studied above, up to translation by a constant factor. In 
general, we set R t = P t ® P t ® P t Q A and check that R t + R' t + R" = O. So t ^ P t is of the type 
studied above, up to a translation and a multiplication by 3 isogeny. 

We will say that two pseudo-parameterizations t h4 Pt and t ^ Qt are equivalent if there exists 
a birational fraction cf>(t) such that = Pm)- We may wonder if two different families of projective 
lines t ^ Dt and t \-t Et can give rise to equivalent pseudo-parameterization t \-t Pt and t Qt. In 
that case Pm) = Qt lies in the intersection of D^u) an d E t . If these two lines are distinct then their 
intersection consists of a single point P^t) = Qt defined over k(t). Since every /c(£)-rational point 
on C is constant we deduce that P t and Q t are constant. A contradiction. So D^u) = Et an d the two 
families correspond by a change of variable. In particular the two associated rational curves in the 
dual plane are the same. 
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The conclusion is that finding pseudo-parameterizations boils down to finding rational curves L 
in the dual plane P having even intersection with C. It is natural to study first rational curves going 
through several cusps of C, because the multiplicity intersection at a singular point is greater than and 
generically equal to 2. In the next section we look for such rational curves with a low degree. 

5 The geometry of flexes 

Let C C P be a smooth plane projective cubic. The nine flex points of C define a configuration in 
the plane P. More interestingly, the nine flex tangents correspond to nine points in the dual plane P. 
We study the latter configuration. We are particularly interested in low degree rational curves going 
through many of these nine cusps of C. Remind a rational curve is a curve with geometric genus 
and a rational point. This is equivalent to the existence of a rational parameterization, see fT9l . 
theorem 4.11. We will first assume that C is the Hessian plane cubic given by Equation ©. Indeed, 
any smooth plane cubic can be mapped onto such an Hessian cubic by a projective linear transform, 
possibly after replacing k by a finite extension of it. The modular invariant of C is 

_ 27a 3 (a + 2) 3 (a 2 - 2a + 4) 3 
J(a) ~ (a-l) 3 (a 2 + o + l) 3 ' 

The nine flexes of C are the three points in the orbit of O = (0 : — 1 : 1) under the action of £3, plus 
the six points in the orbit of (— 1 : £3 : 0) under the action of £3. Let 

u c : (X : Y : Z) h-> (X 2 - aYZ : Y 2 - aXZ : Z 2 - aXY) 

be the Gauss map associated with C. The images by ujq of the nine flexes are the three points in the 
orbit of (a : 1 : 1) under the action of £3 plus the six points in the orbit of (Cf : (3 : a) under the action 
of S3. Figure [3] lists these flexes and their images by the Gauss map. We set O = Aq = (0 : — 1 : 1) 
and 6 = S = (a : 1 : 1). 



Flex of C 


Cusp on C 
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= (0 : -1 


1) 


B = (a:l: 


1) 




= (-1:1 


0) 


Si = (1 : 1 : 


a) 


A 2 


= (1:0:- 


-1) 


S 2 = (1 : a : 


1) 
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= ("1 : Cs 


:0) 
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:o) 
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-1) 


S 4 = (C3 : a : 


Cs 2 ) 


A 5 


= (0 : -1 : 
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S 5 = (a : C 3 2 : 


Cs) 


A 6 


= (Cs : -1 


:0) 


S 6 = (Cs : Cs 2 
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=(-1:0: 


Cs) 


B 7 = (C 3 2 : a : 


Cs) 


A 8 


= (0 : Cs : 


-1) 


S 8 = (a : Cs : 


CD 



Figure 3: Flexes of C and the corresponding cusps on its dual 

These nine points in the dual plane form an interesting configuration, depending on the single 
parameter a. 

Position with respect to lines One can first check, e.g. by exhaustive search, that no three among 
these nine cusps in the dual plane are colinear unless the modular invariant is zero. See the proof of 
Proposition 1 in Section 7.2 of [5]. So the nine points in the dual plane corresponding to the nine flex 
lines are in general position with respect to lines. We deduce the following lemma by duality. 
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Lemma 1 A smooth plane projective cubic over a field with prime to six characteristic has no three 
concurrent tangent flexes, unless its modular invariant is zero. 

Position with respect to conies We now consider the configuration of the nine flex tangents from 
the point of view of pencils of conies. Remember that six points in general position do not lie on any 
conic. Six pairwise distinct points lying on a conic are said to be coconic. Six pairwise distinct lines 
are said to be coconic if they all are tangent to a smooth conic. 

Lemma 2 Consider a smooth plane projective cubic over afield with prime to six characteristic and 
assume that its modular invariant is not zero. Remove 3 colinear flex points. The six tangents at the 
six remaining flexes are coconic. There are twelve such configurations of six coconic flex tangents. 

Note that we claim that the six flex tangents are coconic. Not the six flex points. Equivalently we 
claim that the six points in the dual plane corresponding to the six flex tangents are coconic. 

We first note that the conic with equation UW — aV 2 = meets C at (a : 1 : 1), (1 : 1 : a), 
(Cf : C3 : a )> (a : Cf : C3)' (C3 : Cf : a )> an d (a : C3 : Cf)- The three remaining flexes in P are 
(1 : : — 1), (C3 : : — 1) and (1 : : £3) and they lie on the line with equation Y = 0. The action of 
53 produces two more similar conies. 

The conic with equation U 2 + V 2 + W 2 + (a + 1)(UV + UW + VW) = meets C at the 
six points in the orbit of (£f : £3 : a) under the action of (S3. The three remaining flexes in P are 
(0 : -1 : 1), (-1 : 1 : 0), and (1:0: -1). They lie on the line with equation X + Y + Z = 0. 

The conic with equation U 2 + (3V 2 + C3W 2 + (a + 1){QUV + (3UW + VW) = meets C 
at the three points in the orbit of (a : 1 : 1) under the action of S3. And also at the three points in 
the orbit of (£f : (3 : a) under the action of £3. The three remaining flexes in P are (0 : £3 : — 1)> 
(C3 : -1 : 0), and (-1 : : (3)- They lie on the line with equation X + ( 3 Y + (%Z = 0. The action 
of £3 produces one more such conic. 

The conic with equation (3U 2 + V 2 + (3W 2 + (a + (i)(UV + C3UW + VW) = meets C at 
(a : 1 : 1), (1 : 1 : a), (Cs : a : C 3 2 ), (a = (3 : Cs), (Cs : C 3 2 ,a), ((3 ■ a ■ Cs)- The three remaining 
flexes in P are (1 : : —1), (—1 : £3 : 0), and (0 : (3 : —1). They lie on the line with equation 
(3X + Y + (3Z = 0. The action of £3 produces five more conies. 

We thus obtain twelve smooth conies that cross the dual curve C at six out of its nine cusps. Each 
of these conies is associated with one of the twelve triples of colinear flexes. □ 

Four among these twelve conies are especially interesting because their equations do not involve 
£3. We note that three among these four conies are clearly rational over k(a) because they have an evi- 
dent k(a) rational point. The last one is rational also because its quotient by the evident automorphism 
of order 3 is P 1 over k(a). 

Position with respect to cubics Next we study the pencil of cubics going through the nine points in 
the dual plane associated with the nine flex tangents. It has projective dimension zero in general. The 
cubic with equation 

a(U 3 + V 3 + W 3 ) = (a 3 + 2)UVW 

goes through all these nine points in the dual plane. This cubic is in general non-singular. So it is not 
particularly interesting for our purpose. 
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Position with respect to quartics We now consider curves of degree 4 in the dual plane. The 
projective dimension of the space of plane quartics is 14. So we can force a quartic to meet the 
9 points we are interested in and there remains 5 degrees of freedom. Since we are particularly 
interested in rational curves we use these remaining degrees of freedom to impose a big singularity at 
O = B = (a : 1 : 1). Indeed, two degrees of freedom suffice to cancel the degree 1 part in the Taylor 
expansion at O. And three more degrees of freedom suffice to cancel the degree 2 part also. We find 
a rational quartic Q in P passing through the nine cusps of C and having intersection multiplicity at 
least two at each of them (because they are cusps) and at least six at the cusp O. The equation of this 
rational quartic Q is 

f/ 4 + a(V A + W A ) - 2a(U 3 V + U 3 W + V 3 W + VW 3 ) - (a 3 + l)U(V 3 + W 3 ) 
+3a 2 U 2 {V 2 + W 2 ) + (a 4 + 2a)V 2 W 2 + (1 - a 3 )UVW(V + W) = 0. 

This quartic is irreducible as soon as the modular invariant of C is non-zero, which we assume 
from now on. Computing the intersection with all lines through O we find the following parameteri- 
zation of this quartic 

U(t) = a 2 t 4 - 2at 3 + (a 3 + 2)t 2 - 2a 2 t + a, 
V(t) = a 4 t 4 + (1 - 3a 3 )t 3 + 3a 2 t 2 - 2at + 1, 
W(t) = at 4 - (a 3 + l)i 3 + 3a 2 t 2 - 2at + 1. 

Substituting U, V, and W by U(t), V(t), and W(t) in the equation of C we find the degree 24 
polynomial 

t 6 (t + l) 2 (t 2 - t + l) 2 {at - 2) 2 {{a + l)t - l) 2 ((a 2 - a + l)t 2 + (1 - 2a)t + l) 2 {a 2 t 2 + 1 - at) 2 . 

We check that Q has two branches at O. One branch corresponds to t = 0, and it has intersection 
multiplicity 6 with C. The other branch corresponds to t = 2/ a, and it has intersection multiplicity 2 
with C. This is illustrated by Figure |4] where the real locus of C is in black and the real locus of Q is 
in red. So the total multiplicity of Q.C at O is 8. And the intersection Q.C only consists of cusps of 
C; one with multiplicity 8 and the eight others with multiplicity 2. The real part of this intersection 
locus is visible on Figure 0] 

Lemma 3 Consider a smooth plane projective cubic C over a field with prime to six characteristic 
and assume that its modular invariant is not zero. Let C be the dual of C. Let O be one of the 
nine cusps of C. There exists a rational quartic Q in the dual plane, such that the intersection Q.C 
has multiplicity 8 at O and 2 at each of the eight remaining cusps. In particular Q.C is an even 
combination of cusps of C. 

We stress that the definition of the quartic Q involves one flex on the one hand, and the eight 
remaining flexes on the other hand. So we can define this quartic for any cubic having a rational flex, 
that is for any elliptic curve (and this makes a difference with the four conies constructed earlier, that 
distinguish a triple of colinear flexes, and therefore cannot always be defined over the base field.) 

So we can take for C an elliptic curve with Weierstrass equation 

F(X, Y, Z) = Y 2 Z - X 3 - aXZ 2 - bZ 3 . (6) 
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Figure 4: The real part of the intersection of C and Q. 

We assume a ^ 0, so the modular invariant is non-zero either. The image of the origin O = (0 : 1 : 0) 
by the Gauss map is O = (0 : : 1), and the quartic Q given by Lemma|3]has equation 

U A - W 4 + 6UV 2 W = 0, 

and parameterization 

U(t) = 6t 2 , (7) 
V(t) = 6t 3 , 
W{t) = 3at 4 -l. 

6 Intersecting a cubic with lines 

In this section we assume that the map a h-> a 3 from A; to A; is surjective. This is the case if k is the 
field of real numbers for example. This is also the case if k is a finite field with q elements when q is 
congruent to 2 modulo 3. For every element a in A; we choose once and for all a cubic root tya of a. 
This way we define a map s/ : k — ^ k. We will use the general recipe in Section |4] and the rational 
curves exhibited in Section[5]to produce several pseudo-parameterizations of a plane cubic C. 

6.1 Intersecting the dual curve with a conic 

We may first take L to be one of the twelve conies in Lemma [2] So we assume that C is the Hessian 
cubic given by Equation (O for some a such that a 3 ^ 1. Four conies, among the twelve conies given 
in Lemma|2l are rational over k(a). The intersection L.C has degree 12 and contains six among the 
nine cusps of C, each with multiplicity 2. So this intersection is exactly twice the sum of these six 
cusps. If we take for L the conic with equation UW — aV 2 = then a convenient parameterization 
is given by U(t) = 1, V(t) = —t and W(t) = at 2 . The corresponding line D t has equation 

X-tY + at 2 Z = 0. 

We substitute X by tY — at 2 Z in the Hessian Equation ((U) and find the degree 3 form in Y and Z 

(t 3 + 1)Y 3 - 3at(t 3 + l)Y 2 Z + 3a 2 t 2 (t 3 + l)YZ 2 + (1 - a 3 t 6 )Z 3 
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describing the intersection C.D t . We divide by (t 3 + 1)Z 3 and we obtain a cubic polynomial in 
y = Y/Z whose twisted discriminant is 

We use the formulae and notation in Section 12 We have 



Sl = 


Sat, 


S2 = 


3a 2 t 2 , 




a 3 t 6 - 1 


S3 = 


t 3 + l ' 


5 = 


9(1 + a 3 t 3 ) 




1 + t 3 ' 




,yt 3 + 1 


R = 






' *3 + l 


R' = 


0. 



So we find the solution 

+ JaW + 1 

and we deduce 

x = X/Z = ty- at 2 = -t 
This is the pseudo-parameterization found by Farashahi (H. 

6.2 Intersecting the dual curve with a quartic 

Assume now that we take L to be the rational quartic Q in Lemma [3] All the multiplicities in the 
intersection Q.C are even. So we expect the twisted discriminant to be a square. This time we may as 
well take for C the Weierstrass cubic in Equation ©. The parameterization of Q given in Equation © 
provides a one parameter family of lines (D t )t with equation 

6t 2 X + Qt 3 Y + (3at 4 - \)Z = 0. 

We divide by Z, we set x = X/Z, y = Y/Z and we substitute y by l/(6i 3 ) — at/2 — x/t in the 
Weierstrass Equation ©. We find a cubic equation x 3 — s\x 2 + S2X — S3 in x = X/Z, where 

si = 1/t 2 , 
s 2 = V(3t 4 ), 

s 3 = (l/t 6 - 6a/t 2 - 366 + 9a 2 t 2 )/36. 



Ia 3 t 3 + 1 
t 3 + l 1 



Using the formulae and notation in Section [2] we find 

5 = (-1/t 6 - 1086- 18a/t 2 + 27a 2 t 2 )/12, 
R = 0, 

R' = (-1/t 6 - 1086 - 18a/t 2 + 27a 2 t 2 )/4. 
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So we find the solution 



x = x/z = 3ri + \j—- iW" 5 -^ 

and 

y = Y/Z = ^ - at/2 - x/t. 
This is the pseudo-parameterization found by Icart lfT2l . up to the change of variable t < 1/t. 

6.3 Intersecting the dual curve with a line 

Assume finally that we take for L a line passing through two rational cusps of C. So we assume that 
C is the Hessian cubic given by Equation © for some a 3 ^ 1. Assume L is the unique line passing 
through the two cusps Bq = (a : 1 : 1) and B2 = (1 : a : 1) of C. The intersection L.C has degree 
6. Since (a : 1 : 1) and (1 : a : 1) each have intersection multiplicity > 2, there remains at most two 
intersection points. An illustration of this situation in the real projective plane is given on Figure [5] 



Figure 5: The intersection of C and L 

Not all the multiplicities in the intersection L.C we, even, but only two multiplicities are odd. So 
we expect A (t) to be a square times a degree 2 polynomial in t. Points on L C P represent a linear 
pencil of lines in P generated by the tangents to C at (0 : — 1 : 1) and (1 : : —1). The first tangent 
has equation aX + Y + Z = 0. The second tangent has equation X + aY + Z = 0. So let t be a 
formal parameter and consider the line D t with equation (at + 1)X + (t + a)Y + (t + 1).Z = 0. The 
tangent at (0 : — 1 : 1) corresponds to the value t = 00. The tangent at (1 : : — 1) corresponds to the 
value t = 0. The line D t meets the fixed point (1 : 1 : —a — I) and the moving point (1, — t,t — 1). 
So a parametric description of D t is given by 

+ 1 :i-t :t-l - (a + 

We substitute X by i + 1, Y by i — t and Z by t — 1 — (a + l)i in Equation (0) and divide by the 
leading coefficient. We find the degree three polynomial 



a 2 + a + l a 2 + a + l 



defining the intersection D t .C. The twisted discriminant of /1 is 

A(t) _ g U 2 9 (" 2 + a + l ) t2 + 2 ( 2a + 1)(° 2 + « + 7)t + 9(a 2 + a + 1) 
U (a 2 + a + l) 3 
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This is not quite a square in k(a)(t). However, it only has two roots with odd multiplicity. So 
if we substitute t by a well chosen rational fraction, we can turn A into a square. So we look for a 
parameterization of the plane projective conic with equation 

(a 2 + a + 1)S 2 = 9(a 2 + a + 1)T 2 + 2(2a + l)(a 2 + a + 7)TK + 9(a 2 + a + l)K 2 . (10) 

This conic has two evident k -rational points, namely (3:1:0) and (3:0:1). The line through 
these two points has equation 

-S + 3T + 3K = 0. 

The tangent at (3 : : 1) has equation 

3(a 2 +a + l)S- (2a + l)(a 2 + a + 7)T - 9(a 2 + a + l)K = 0. 
The generic line in the linear pencil generated by these two lines has equation 

(3(a 2 + a + 1) - j)S + (3j - (2a + l)(a 2 + a + 7)j)T + (3j - 9(a 2 + a + l)j)K = (11) 

where j is a formal parameter. 

Intersecting the conic in Equation (fTOl with the line in Equation (fTTT ) we find the parameterization 

= 3j 2 - 2(a + 2) 3 j + 3(a + 2) 3 (a 2 + a + 1), 
j(i"3(a 2 + a + l)), 
(a 2 + a+ l)((a + 2) 3 -3j). 

We now substitute t by T(j)/K(j) in Equation ((8]) and find a cubic polynomial with coefficients 
in the field k(a)(j). If we substitute t by T(j)/K(j) in Equation (© we find that A = S 2 (j) where 

9j(3j 2 - 2(a + 2) 3 j + 3(a 2 + a + l)(a + 2) 3 )(3(a 2 + a + 1) - j) 
[J) ((a + 2) 3 -3j) 2 (a 2 + a + l) 3 

We use the formulae and notation in Section |2l The polynomial h in Equation (HJ has coefficients 
1, —s%, S2 and —S3 with 

si = 

3j(a + 2)(3(a 2 + a + l)-j) 




•S2 



•S3 



(a 2 + a + l) 2 ((a + 2) 3 -3j) 
3j'(3(a 2 + a + 1) - j)((a 2 + a + l)(a + 2) 3 - j 2 ) 



(a 2 + a + l) 3 ((a + 2) 3 -3j) 2 
We deduce the following pseudo-parameterization of the cubic C 



27j 2 (3(a 2 +a + l)-j) 
((a + 2) 3 -3j)(a 2 +a + l) 3 



m 
p(j) = 

9j(a + 2)(3(a 2 +a + l) 



P'U) 

" (a 2 +a+l)((a + 2) 3 -3j) 
P(j) = (i(j) + l-i(j)-t(j):t(j)-l-(a + l)i(j)). 



( a 2 +a+1) 2 ((a + 2) 3_3 i)/a(j) 

p(j) + p'(j) 
3 

j(3(a 2 + a + l) -j) 



13 



where P(j) is the point on C associated with the parameter j. 

We illustrate this situation on Figure [6] in the case a = 2. The red segment corresponds to the 
parameter j taking values in the interval [—4, —0.3]. We also note that the computation in Section 3.1 
of H3 ] hides a similar geometric situation. 




Figure 6: A pseudo-parameterization 



7 Classifying pseudo-parameterization 

We have seen many different pseudo-parameterizations of a plane cubic, each associated with a ra- 
tional curve in P having even intersection with the dual curve C in Equation ([3]). We may wonder 
if there exist more such rational curves, leading to more pseudo-parameterizations. We may also try 
to put some structure on the set of such curves. This is our purpose of this section. We assume that 
the reader has some familiarity with algebraic surfaces as presented in i22l lTll. and particularly with 
elliptic and K3 surfaces lfl~8l 171131. We shall not enter into the details. Any rational curve L having 
even intersection with C lifts to a rational curve on the degree two covering E of P branched along C. 
To define £ we consider the function field k(a)(U/W, V/W) of P over k(a). We define a quadratic 
extension of this field by adding a square root 7 of G{U, V, W)/W 6 where G(U, V, W) is the equa- 
tion of C. The normal closure of P inside k(a)(U/W, V/W, 7) is £. It has nine singularities. One 
above each of the nine cusps of C. In order to obtain a smooth model for £, we first blow up P at 
each of the cusps of C. We call II the resulting surface. The inverse image of C by II — > P consists 
of one smooth genus one curve and 9 rational curves tangent to it. We call S the normal closure of II 
in k(a)(U/W, V/W, 7). This is a smooth surface, the minimal model of E. 

We call o\ the automorphism of P that maps [U : V : W] onto [V, W, U]. We call 02 the auto- 
morphism of P that maps [U : V : W] onto [U, (3V, £f W\. We call 0-3 the automorphism of P that 
maps [U : V : W] onto [V, U, W\. We extend these three automorphisms to k(a)(U/W, V/W, 7) by 
sending 7 to itself. The resulting automorphisms are called o\, 02 and 03 also. They induce automor- 
phisms of II, E and S denoted a\, 02 and (73 again. We call 04 the unique non-trivial automorphism 
of k(a)(U/W, V/W,j) over k(a)(U/W, V/W). It induces automorphisms of E and S denoted 0-4. 
The action of o\,oi, 03 on the B{ is given by the following three permutations of the indices 

<T X = (0,1,2)(3,4,5)(6,7,8), 

02 = (0,5, 8X1,3,6X2, 4, 7), 

03 = (0,2)(1)(3,6)(4,8)(5,7). 

The group generated by o\ and 02 has order nine. It acts simply transitively on the nine cusps, and 
also on the nine corresponding rational curves on the blow up II. We choose one of the two rational 
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curves on S above Bq and call it Eq. For 1 < i < 9 we call Ei the image of Eq by the unique 
automorphism in < <7i, a 2 > that maps £?o onto Bi. We call Fj the image of Ei by 0-4. We thus obtain 
eighteen rational curves on S. Let H be the inverse image by S — > P of any line in P. The lattice 
generated by the Ei, Fi and H in the Neron-Severi group has rank 19, and discriminant 2.3 9 . The 
intersection indices are 



Ei.Fi 


= 1, 


El 


- -2, 


Ft 


- -2, 


Ei.Ej 


= for i 7^ j 


Ei.Fj 


= for i 7^ j 


Ei.H 


= 0, 


Fi.H 


= 0, 


H 2 


= 2. 



Let D be a generic line in P through Bq. The intersection of D.C is 2i?o plus an effective degree 
four divisor. So the inverse image of D in 5* is the union of Eq, Fq and a genus one curve with at least 
two rational points : the intersection points with Eq and Fq. Thus the inverse image by S — > P of the 
pencil of lines through Bq defines an elliptic fibration / : S — > P 1 of S, with two sections Eq and 
Fq, so S is an elliptic K3 surface. The following lemma 1 15, 2.3] is usefull when looking for rational 
curves on a K3 surface. 

Lemma 4 Let D be a class with self-intersection —2 in the Neron-Severi group of a K3 surface. Then 
either D or —D contains an effective divisor. If this divisor is irreducible then it is a smooth rational 
curve. 

We may also look for singular rational curves in classes with positive self-intersection. One can 
even count rational curves in such classes El [THEE]]. Since there are many of them, they are unlikely 
to be defined over the base field. Indeed, all the rational curves in Section [5] lift to smooth rational 
curves on S having self-intersection —2. For example the conic in P passing through Bq, B\, B2, -B3, 
B 4 , B 5 lifts to a rational curve I012345 on S. We have #./ i2345 = 2, Eq.Iq 123 45 = £a~ibl2345 = 
F2./012345 = 1 and F3./012345 = F4./012345 = F5./012345 = 1 and /012345 has zero intersection with 
the remaining Ei and Fi. We deduce the following identity in the Neron-Severi group 

3/o,i,2,3,4,5 = 3H- 2{Eq + E 1 + E 2 ) - (Fi + F 2 + F 3 ) - (E 3 + E 4 + E 5 ) - 2(F 3 + F 4 + F 5 ), 
and Io,i,2,3,4,5 has self-intersection —2. We find similarly, and with evident notation, 

3/o,i,3,4,7,8 = 3H- 2(Eq + E 3 + E 7 ) - (Fq + F 3 + F 7 ) - (Ei + E 4 + E 8 ) - 2{F X +F 4 + F 8 ), 
and 

3/o,i,3,5,6,8 = 3H- 2(Eq + £ 5 + E 8 ) - (Fq + F 5 + F 8 ) - (E x + E 3 + E 6 ) - 2(F X + F 3 + F 6 ). 

The action of < o\ , o 2 , <? 3 , a 4 > produces 24 similar smooth rational curves on S with self intersec- 
tion —2. This is the contribution of conies in Lemma[2l 
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Now consider the quartic given by Lemma [3] It lifts to a rational curve Jo on S, such that Jq.H = 
4, Jq.Eq = 2, Jq.Fq = 1, Jo-Ei = 1, J .Fi = for 1 < i < 8. We have the following identity in the 
Neron-Severi group 

3J = 6H- 5E - 4F - £ (2#; + Fj). 

l<i<8 

The action of < oi, 02,04 > produces 18 such rational curves with self intersection —2. The 
lattice generated by H, the nine Ei, the nine Fi, and the 24 + 18 classes coming from conies and 
quarries, has dimension 19 and discriminant 54. This is the full Neron-Severi group of S when k 
has characteristic zero and a is a transcendental. Using the knowledge of this Neron-Severi group 
we can prove that there are infinitely many rational curves on S, leading to infinitely many pseudo- 
parameterizations of the cubic C. We consider an elliptic-fibration of S, for example the fibration 
/ : 5 — > P 1 introduced above. We choose the section Eq as origin. The generic fiber of / is an 
elliptic curve over the function field k(t) of P 1 . Fibers of / map onto lines through Bq in P. The 
height singular fibers of / map onto the lines BqB^ for 1 < i < 8. Each of them has Kodaira type 
^3, the three irreducible components being Ei, Fi, and a third rational curve G{ crossing Eq and Fq. 
Let T C NS(S') be the group generated by the zero section Eq and the fiber components Ei, Fi, Gi 
for 1 < i < 8. The Mordell-Weil group of the generic fiber is isomorphic [18, Theorem 6.3] to the 
quotient NS (S) /T. Since E { + Fi + d = H - Eq - F does not depend on i for 1 < i < 8, the rank of 
T is 18 and the rank of NS(S') is one. So we have infinitely many sections of /. The images of these 
sections all are rational curves with self intersection —2. We draw one of these rational curves (rather 
its image in P) on Figure [7] In case C is the Weierstrass cubic in Equation ©, a parameterization of 
this rational curve is 

U(t) = 4at 6 + 4t 2 /27, (12) 
V(t) = t(4at 6 + 4t 2 /27), 
W(t) = a 2 t 8 + 2at 4 /27 + 46t 6 + l/81. 




Figure 7: One more rational curve having even intersection with C. 
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